Security
How we handle your mailbox
Draftbee creates drafts. It can't send email: it doesn't ask Microsoft for send permission, and the connector has no send tool.
Microsoft permissions
| Permission | What it's used for |
|---|---|
Mail.ReadWrite (delegated) | Create drafts, read your Templates folder, find a message you ask Claude to reply to, and copy an email you ask to save as a template. |
openid, profile, email, User.Read | Sign you in and show which account is connected. |
offline_access | Keep you connected without signing in every hour. |
Mail.Send | Not requested. Draftbee can't send email. |
Emails in your Templates folder are only ever read. Every draft is a new message, so a template can't be sent or lost.
What we store
- Your templates, library files (such as brochures and price lists) and signature.
- Your Microsoft tokens, encrypted at rest with AES-GCM.
- A log of each draft's subject and time.
What we don't store
- Draft contents. They pass through to Outlook and aren't kept.
- Email bodies or tokens in logs.
Disconnect and delete
You can disconnect and delete all your data from Settings at any time. You can also remove the app from your Microsoft account at myapps.microsoft.com.
Company Microsoft 365 accounts
Some organisations require an IT admin to approve new apps. If yours does, we show you an admin-approval link to send them. They approve it once for the organisation.